# CVEs published 2009-07-14

61 CVEs were published on July 14, 2009: 0 critical, 0 high. Days are UTC.

- [CVE-2009-0217](https://cve.now/CVE-2009-0217.md): The design of the W3C XML Signature Syntax and Processing (XMLDsig) recommendation, as implemented in products including (1) the Oracle Secu (no CVSS, org.apache.santuario:xmlsec)
- [CVE-2009-0987](https://cve.now/CVE-2009-0987.md): Unspecified vulnerability in the Upgrade component in Oracle Database 9.2.0.8, 9.2.0.8DV, 10.1.0.5, and 10.2.0.3 allows remote authenticated (no CVSS)
- [CVE-2009-1015](https://cve.now/CVE-2009-1015.md): Unspecified vulnerability in the Core RDBMS component in Oracle Database 9.2.0.8, 9.2.0.8DV, 10.1.05, and 10.2.04 allows remote authenticate (no CVSS)
- [CVE-2009-1019](https://cve.now/CVE-2009-1019.md): Unspecified vulnerability in the Network Authentication component in Oracle Database 9.2.0.8, 9.2.0.8DV, 10.1.0.5, 10.2.0.4, and 11.1.0.7 al (no CVSS)
- [CVE-2009-1020](https://cve.now/CVE-2009-1020.md): Unspecified vulnerability in the Network Foundation component in Oracle Database 9.2.0.8, 9.2.0.8DV, 10.1.0.5, 10.2.0.4, and 11.1.0.7 allows (no CVSS)
- [CVE-2009-1021](https://cve.now/CVE-2009-1021.md): Unspecified vulnerability in the Advanced Replication component in Oracle Database 9.2.0.8, 9.2.0.8DV, 10.1.0.5, and 10.2.0.3 allows remote (no CVSS)
- [CVE-2009-1963](https://cve.now/CVE-2009-1963.md): Unspecified vulnerability in the Network Foundation component in Oracle Database 11.1.0.6 allows remote authenticated users to affect integr (no CVSS)
- [CVE-2009-1966](https://cve.now/CVE-2009-1966.md): Unspecified vulnerability in the Config Management component in (1) Oracle Database 11.1.0.7 and (2) Oracle Enterprise Manager 10.2.0.4 allo (no CVSS)
- [CVE-2009-1967](https://cve.now/CVE-2009-1967.md): Unspecified vulnerability in the Config Management component in (1) Oracle Database 11.1.0.7 and (2) Oracle Enterprise Manager 10.2.0.4 allo (no CVSS)
- [CVE-2009-1968](https://cve.now/CVE-2009-1968.md): Unspecified vulnerability in the Secure Enterprise Search component in Oracle Database 10.1.8.3 allows remote attackers to affect integrity (no CVSS)
- [CVE-2009-1969](https://cve.now/CVE-2009-1969.md): Unspecified vulnerability in the Auditing component in Oracle Database 9.2.0.8, 9.2.0.8DV, 10.1.0.5, 10.2.0.4, and 11.1.0.7 allows remote au (no CVSS)
- [CVE-2009-1970](https://cve.now/CVE-2009-1970.md): Unspecified vulnerability in the Listener component in Oracle Database 9.2.0.8, 9.2.0.8DV, 10.1.0.5, 10.2.0.4, and 11.1.0.7 allows remote at (no CVSS)
- [CVE-2009-1973](https://cve.now/CVE-2009-1973.md): Unspecified vulnerability in the Virtual Private Database component in Oracle Database 10.1.0.5, 10.2.0.4, and 11.1.0.7 allows remote authen (no CVSS)
- [CVE-2009-1974](https://cve.now/CVE-2009-1974.md): Unspecified vulnerability in the WebLogic Server component in BEA Product Suite 10.3, 10.0 MP1, 9.2 MP3, 9.1, 9.0, 8.1 SP6, and 7.0 SP7 allo (no CVSS)
- [CVE-2009-1975](https://cve.now/CVE-2009-1975.md): Unspecified vulnerability in the WebLogic Server component in BEA Product Suite 10.3 allows remote attackers to affect confidentiality, inte (no CVSS)
- [CVE-2009-1976](https://cve.now/CVE-2009-1976.md): Unspecified vulnerability in the HTTP Server component in Oracle Application Server 10.1.2.3 allows remote attackers to affect integrity via (no CVSS)
- [CVE-2009-1977](https://cve.now/CVE-2009-1977.md): Unspecified vulnerability in the Oracle Secure Backup component in Oracle Secure Backup 10.2.0.3 allows remote attackers to affect confident (no CVSS)
- [CVE-2009-1978](https://cve.now/CVE-2009-1978.md): Unspecified vulnerability in the Oracle Secure Backup component in Oracle Secure Backup 10.2.0.3 allows remote attackers to affect confident (no CVSS)
- [CVE-2009-1980](https://cve.now/CVE-2009-1980.md): Unspecified vulnerability in the Oracle Application Object Library component in Oracle E-Business Suite 11.5.10.2, 12.0.6, and 12.1 allows r (no CVSS)
- [CVE-2009-1981](https://cve.now/CVE-2009-1981.md): Unspecified vulnerability in the Highly Interactive Client component in Siebel Product Suite 7.5.3, 7.7.2, 7.8.2, 8.0.0.5, and 8.1.0 allows (no CVSS)
- [CVE-2009-1982](https://cve.now/CVE-2009-1982.md): Unspecified vulnerability in the Oracle Applications Framework component in Oracle E-Business Suite 11.5.10.2 and 12.0.6 allows remote attac (no CVSS)
- [CVE-2009-1983](https://cve.now/CVE-2009-1983.md): Unspecified vulnerability in the Oracle iStore component in Oracle E-Business Suite 11.5.10.2, 12.0.6, and 12.1 allows remote attackers to a (no CVSS)
- [CVE-2009-1984](https://cve.now/CVE-2009-1984.md): Unspecified vulnerability in the Application Install component in Oracle E-Business Suite 11.5.10.2, 12.0.6, and 12.1 allows local users to (no CVSS)
- [CVE-2009-1986](https://cve.now/CVE-2009-1986.md): Unspecified vulnerability in the Oracle Applications Manager component in Oracle E-Business Suite 11.5.10.2 allows remote attackers to affec (no CVSS)
- [CVE-2009-1987](https://cve.now/CVE-2009-1987.md): Unspecified vulnerability in the PeopleSoft Enterprise PeopleTools - Enterprise Portal component in Oracle PeopleSoft Enterprise and JD Edwa (no CVSS)
- [CVE-2009-1988](https://cve.now/CVE-2009-1988.md): Unspecified vulnerability in the PeopleSoft Enterprise HRMS eProfile Manager component in Oracle PeopleSoft Enterprise and JD Edwards Enterp (no CVSS)
- [CVE-2009-1989](https://cve.now/CVE-2009-1989.md): Unspecified vulnerability in the PeopleSoft Enterprise FMS component in Oracle PeopleSoft Enterprise and JD Edwards EnterpriseOne 8.8 SP1, 8 (no CVSS)
- [CVE-2009-0192](https://cve.now/CVE-2009-0192.md): Off-by-one error in the iMonitor component in Novell eDirectory 8.8 SP3, 8.8 SP3 FTF3, and possibly other versions allows remote attackers t (no CVSS)
- [CVE-2009-0692](https://cve.now/CVE-2009-0692.md): Stack-based buffer overflow in the script\_write\_params method in client/dhclient.c in ISC DHCP dhclient 4.1 before 4.1.0p1, 4.0 before 4.0.1 (no CVSS)
- [CVE-2009-1382](https://cve.now/CVE-2009-1382.md): Multiple stack-based buffer overflows in mimetex.cgi in mimeTeX, when downloaded before 20090713, allow remote attackers to execute arbitrar (no CVSS)
- [CVE-2009-1383](https://cve.now/CVE-2009-1383.md): The getdirective function in mathtex.cgi in mathTeX, when downloaded before 20090713, allows remote attackers to execute arbitrary commands (no CVSS)
- [CVE-2009-1422](https://cve.now/CVE-2009-1422.md): Unspecified vulnerability in HP ProCurve Threat Management Services zl Module (J9155A) ST.1.0.090213 and earlier allows remote attackers to (no CVSS)
- [CVE-2009-1423](https://cve.now/CVE-2009-1423.md): Unspecified vulnerability in HP ProCurve Threat Management Services zl Module (J9155A) ST.1.0.090213 and earlier allows remote attackers to (no CVSS)
- [CVE-2009-1424](https://cve.now/CVE-2009-1424.md): Unspecified vulnerability in HP ProCurve Threat Management Services zl Module (J9155A) ST.1.0.090213 and earlier allows remote attackers to (no CVSS)
- [CVE-2009-1425](https://cve.now/CVE-2009-1425.md): Unspecified vulnerability in HP ProCurve Threat Management Services zl Module (J9155A) ST.1.0.090213 and earlier allows remote attackers to (no CVSS)
- [CVE-2009-2347](https://cve.now/CVE-2009-2347.md): Multiple integer overflows in inter-color spaces conversion tools in libtiff 3.8 through 3.8.2, 3.9, and 4.0 allow context-dependent attacke (no CVSS)
- [CVE-2009-2456](https://cve.now/CVE-2009-2456.md): The DS\\NDSD component in Novell eDirectory 8.8 before SP5 allows remote attackers to cause a denial of service (ndsd core dump) via an LDAP (no CVSS)
- [CVE-2009-2457](https://cve.now/CVE-2009-2457.md): The DS\\NDSD component in Novell eDirectory 8.8 before SP5 allows remote attackers to cause a denial of service (crash) via a malformed bind (no CVSS)
- [CVE-2009-2458](https://cve.now/CVE-2009-2458.md): Unspecified vulnerability in Sun Fire V215 Server, when using XVR-100 graphic cards on system boards with part number 375-3463 and a hardwar (no CVSS)
- [CVE-2009-2459](https://cve.now/CVE-2009-2459.md): Multiple unspecified vulnerabilities in mimeTeX, when downloaded before 20090713, have unknown impact and attack vectors related to the (1) (no CVSS)
- [CVE-2009-2460](https://cve.now/CVE-2009-2460.md): Multiple stack-based buffer overflows in mathtex.cgi in mathTeX, when downloaded before 20090713, have unspecified impact and remote attack (no CVSS)
- [CVE-2009-2461](https://cve.now/CVE-2009-2461.md): mathtex.cgi in mathTeX, when downloaded before 20090713, does not securely create temporary files, which has unspecified impact and local at (no CVSS)
- [CVE-2008-6854](https://cve.now/CVE-2008-6854.md): Xigla Software Absolute FAQ Manager.NET 6.0 allows remote attackers to bypass authentication and gain administrative access by setting a coo (no CVSS)
- [CVE-2008-6855](https://cve.now/CVE-2008-6855.md): Xigla Software Absolute News Feed 1.0 and possibly 1.5 allows remote attackers to bypass authentication and gain administrative access by se (no CVSS)
- [CVE-2008-6856](https://cve.now/CVE-2008-6856.md): Xigla Software Absolute News Manager.NET 5.1 allows remote attackers to bypass authentication and gain administrative access by setting a co (no CVSS)
- [CVE-2008-6857](https://cve.now/CVE-2008-6857.md): Absolute Podcast .NET 1.0 allows remote attackers to bypass authentication and gain administrative access by setting a cookie to a certain v (no CVSS)
- [CVE-2008-6858](https://cve.now/CVE-2008-6858.md): Absolute Banner Manager .NET 4.0 allows remote attackers to bypass authentication and gain administrative access by setting a cookie to a ce (no CVSS)
- [CVE-2008-6859](https://cve.now/CVE-2008-6859.md): Xigla Software Absolute Control Panel XE 1.5 allows remote attackers to bypass authentication and gain administrative access by setting a co (no CVSS)
- [CVE-2008-6860](https://cve.now/CVE-2008-6860.md): Xigla Software Absolute Poll Manager XE 4.1 allows remote attackers to bypass authentication and gain administrative access by setting a coo (no CVSS)
- [CVE-2008-6861](https://cve.now/CVE-2008-6861.md): Xigla Software Absolute Newsletter 6.0 and 6.1 allows remote attackers to bypass authentication and gain administrative access by setting a (no CVSS)
- [CVE-2008-6862](https://cve.now/CVE-2008-6862.md): Absolute Content Rotator 6.0 allows remote attackers to bypass authentication and gain administrative access by setting a cookie to a certai (no CVSS)
- [CVE-2008-6863](https://cve.now/CVE-2008-6863.md): Xigla Software Absolute Form Processor .NET 4.0 allows remote attackers to bypass authentication and gain administrative access by setting a (no CVSS)
- [CVE-2008-6864](https://cve.now/CVE-2008-6864.md): Xigla Software Absolute Live Support .NET 5.1 allows remote attackers to bypass authentication and gain administrative access by setting a c (no CVSS)
- [CVE-2008-6865](https://cve.now/CVE-2008-6865.md): SQL injection vulnerability in modules.php in the Sectionsnew module for PHP-Nuke allows remote attackers to execute arbitrary SQL commands (no CVSS)
- [CVE-2008-6866](https://cve.now/CVE-2008-6866.md): SQL injection vulnerability in modules.php in the Current\_Issue module for PHP-Nuke allows remote attackers to execute arbitrary SQL command (no CVSS)
- [CVE-2008-6867](https://cve.now/CVE-2008-6867.md): SQL injection vulnerability in content.php in Scripts For Sites (SFS) EZ Career allows remote attackers to execute arbitrary SQL commands vi (no CVSS)
- [CVE-2009-2451](https://cve.now/CVE-2009-2451.md): Multiple SQL injection vulnerabilities in index.php in MIM:InfiniX 1.2.003 and possibly earlier versions allow remote attackers to execute a (no CVSS)
- [CVE-2009-2452](https://cve.now/CVE-2009-2452.md): Multiple unspecified vulnerabilities in Citrix Licensing 11.5 have unknown impact and attack vectors, related to "underlying components of t (no CVSS)
- [CVE-2009-2453](https://cve.now/CVE-2009-2453.md): Citrix XenApp (formerly Presentation Server) 4.5 Hotfix Rollup Pack 3 does not apply an access policy when it is defined with the Access Gat (no CVSS)
- [CVE-2009-2454](https://cve.now/CVE-2009-2454.md): Cross-site scripting (XSS) vulnerability in Citrix Web Interface 4.6, 5.0, and 5.0.1 allows remote attackers to inject arbitrary web script (no CVSS)
- [CVE-2009-2455](https://cve.now/CVE-2009-2455.md): Multiple cross-site scripting (XSS) vulnerabilities in webadmin/admin.php in @mail 5.6.1 allow remote attackers to inject arbitrary web scri (no CVSS)

---

Source: cve.now, built and run by Sazabi (AI-native observability and security)
Page: https://cve.now/daily/2009-07-14
Site guide for agents: https://cve.now/llms.txt
Uses NVD data; not endorsed by NVD.